Re: Wristwatches and chronometers

2005-11-05 Thread mouss

Steve Heggood a écrit :


Has anyone developed a rule for the current onslaught of wristwatch spam?
Thanks in advance,
-steve-


70_sare_specific.cf contains many ones.


bayes on tmpfs

2005-11-05 Thread Ramprasad A Padmanabhan
Hi,
   We run spamassassin on our Mailservers that receive close to 20k
mails per hour. 
 The problem is SA takes too long especially for the bayesian checks 

  I am thinking of moving the BAYES DB to a tmpfs partition. What are
the pros and cons ? I could write a cron to just copy the bayes to a
harddisk partition for recovery in case of a reboot.  The only concern
is that there would be too much of memory consumed because bayes by
itself also caches a lot in the memory


Thanks
Ram 




Re: bayes on tmpfs

2005-11-05 Thread Michael Monnerie
On Samstag, 5. November 2005 10:24 Ramprasad A Padmanabhan wrote:
> I am thinking of moving the BAYES DB to a tmpfs partition.

What about using MySQL? It should be speedy, and "system builder" is 
using for such a solution, too (see thread "HUGE bayes DB 
(non-sitewide) advice?"). A good hint for big systems would help many 
people, and would be good to put on the Wiki.

mfg zmi
-- 
// Michael Monnerie, Ing.BSc  ---   it-management Michael Monnerie
// http://zmi.at   Tel: 0660/4156531  Linux 2.6.11
// PGP Key:   "lynx -source http://zmi.at/zmi2.asc | gpg --import"
// Fingerprint: EB93 ED8A 1DCD BB6C F952  F7F4 3911 B933 7054 5879
// Keyserver: www.keyserver.net Key-ID: 0x70545879


pgpANvQPdoDEH.pgp
Description: PGP signature


Re: logo spam ruleset

2005-11-05 Thread Loren Wilton
There were A LOT of logo spams a while back.  I know there was a ruleset,
and it may have been a SARE ruleset.  However, it is possible that many of
those rules may have been depreciated from lack of use.

Loren



Re: resolve URI domain to IP and match that?

2005-11-05 Thread Matt Kettler

At 06:50 PM 11/4/2005, wolfgang wrote:

after a wave of spam mails two days ago, today there was a new wave
advertising a different URI that resolves to the same IP.

is there a built in possibility in SA (3.0.4) ro resolve a URI's domain to an
IP and match that against a known IP, lets say 1.2.3.4 and thus score any
hostname/domain that resolves to that IP?


Not a good idea... it's a known DoS vulnerability.

This gives the spammer the opportunity to slow down your mailserver by 
flooding it with emails containing unresolvable URIs. forcing a DNS timeout 
for each. Worse still they could deliberately feed back CNAME recursions 
that go all over the place adding DNS load.


Admittedly the URIDNSBL plugin limits the number of URI's per message, but 
a spammer could intentionally add a LOT of load to your system this way.




Re: Outsource my mail?

2005-11-05 Thread Marc Perkel
I created a wiki page here for third party services. Rather than a 
comparisin matrix I figure why not just put the vendor propaganda there 
and let people figure it out for themselves. I posted my stuff and I'm 
encouraging other vendors to do likewise.


http://wiki.apache.org/spamassassin/SpamFilteringServices

mouss wrote:


Michele Neylon :: Blacknight.ie a écrit :



Finding a neutral 3rd party to do a comparison matrix would be
difficult, but interesting

well, someone may start, and then the page gets reviewed until some 
level of agreement is reached...




--
Marc Perkel - [EMAIL PROTECTED]

Spam Filter: http://www.junkemailfilter.com
   My Blog: http://marc.perkel.com



Re: Outsource my mail?

2005-11-05 Thread Michele Neylon:: Blacknight.ie
Marc Perkel wrote:
> I created a wiki page here for third party services. Rather than a
> comparisin matrix I figure why not just put the vendor propaganda there
> and let people figure it out for themselves. I posted my stuff and I'm
> encouraging other vendors to do likewise.
> 
> http://wiki.apache.org/spamassassin/SpamFilteringServices
> 

Nice idea. I'll see about adding our details to it as well

Thanks

Michele


-- 
Mr Michele Neylon
Blacknight Solutions
Quality Business Hosting & Colocation
http://www.blacknight.ie/
Tel. 1850 927 280
Intl. +353 (0) 59  9183072
Direct Dial: +353 (0)59 9183090
Fax. +353 (0) 59  9164239


Re: Wiki Changes - Added Testimonials Page

2005-11-05 Thread Marc Perkel

I added a testimonials page.

http://wiki.apache.org/spamassassin/Testimonials

Made a lot of changes to the Wiki. Hope everyone likes it and hope you 
don't all freak out. I did some similar mass edits to the wikis of Exim 
and Dovecot a few months ago and people loved it. Just trying to create 
some organization and make it so that people want to get in and add to 
and edit the wiki. Feedback appreciated.